Privacy Policy

Last updated: October 13, 2026

Your privacy matters to us.

At Gojiberry AI, we help sales teams identify and reach relevant B2B prospects by analyzing professional and business signals. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights.

Gojiberry AI is operated by Superfruits SAS. Where relevant, references to “Gojiberry AI”, “Gojiberry”, “we”, “us” or “our” may also include Superfruits, Inc.

1. Who This Policy Applies To

This policy covers:

• Website visitors

• Prospective and current customers

• Authorized users of our platform

• Business contacts whose professional data we process in connection with our services

Depending on the processing activity, we may act as a controller of personal data or as a processor acting on behalf of our customers.

We act as a controller for activities where we determine the purposes and essential means of processing, including operating our website and service, managing customer relationships, our own B2B marketing, service improvement, security, and certain collection and enrichment of professional business-contact data.

Where we process customer-provided data solely on a customer’s documented instructions, we act as a processor on that customer’s behalf. In those cases, the customer remains responsible for its own use of the data and for complying with applicable law.

2. What We Collect and Why

a. Identity & Access

We may collect your name, email address, company, job title, phone number, and account credentials when you sign up or use our services.

We use this information to:

• Set up and manage your account

• Provide the service

• Send product and transactional communications

• Provide customer support

• Secure and authenticate access to the platform

Legal basis: Performance of a contract; legitimate interests.

b. Lead & Professional Business Contact Data

We collect and enrich professional and business information from lawful sources, including:

• Name, job title, seniority, company, and professional location

• Public professional profile URLs

• Business email addresses and business phone numbers

• Company websites and business information

• Public professional activity and business signals, such as job changes, hiring activity, funding, technology usage, public social engagement, and similar B2B signals

• Information lawfully provided by customers, integrations, or third-party B2B data and enrichment providers

We use this information to help identify, qualify, enrich, rank, and display relevant B2B prospects and opportunities to our customers.

Legal basis (GDPR / UK GDPR): Legitimate interests in conducting proportionate B2B business development and providing B2B sales intelligence services, subject to applicable rights and safeguards.

Our services are intended for professional and B2B use. We do not intentionally use special-category personal data to target individuals based on characteristics such as political opinions, religion, health, race or ethnicity, or sexual orientation.

If you are a business contact whose data we process, you may object to processing for direct marketing at any time via our Privacy Choices page.

c. Usage Data

We collect data about how you use the platform, such as feature usage, technical logs, IP address, browser and device information, and interaction data.

We use this information to:

• Improve performance and usability

• Recommend relevant workflows or automations

• Detect anomalies, fraud, or abuse

• Develop and improve our services and AI-enabled features

Where we rely on legitimate interests for service improvement, you may object to this processing as described in the Your GDPR / UK GDPR Rights section below.

Legal basis: Legitimate interests; legal obligation where applicable.

d. Billing Information

If you purchase a plan, we collect billing details such as your name, billing address, and tax information. Payments are processed by third-party payment providers such as Stripe.

We do not store full payment card details.

Legal basis: Performance of a contract; legal obligation.

e. Website Analytics, Cookies & Website Visitors

We use cookies and similar technologies to operate our website, understand usage, improve our services, measure advertising effectiveness, and support marketing and attribution.

We may use tools such as Google Analytics, Meta Pixel, LinkedIn Ads, and similar analytics or advertising technologies.

We also use Snitcher to identify companies that visit our website. Snitcher may process technical and behavioral information such as IP address, pages visited, referral information, and visit duration in order to determine the company associated with a visit. The resulting visitor information is presented at company level rather than as an identified individual visitor.

We may also provide similar website-visitor functionality to customers through our Website Visitors feature. When we process website-visitor data solely on behalf of a customer and according to that customer’s instructions, we act as a processor for that customer.

Where required by applicable law, including in the EU/EEA and UK, non-essential cookies, advertising technologies, and website visitor identification technologies are activated only after obtaining the required consent.

You can manage your cookie preferences through the Cookie Settings control available on our website (footer) and through your browser settings.

Legal basis: Consent where required; legitimate interests for strictly necessary or exempt analytics where permitted by law.

f. Communications

If you contact us, respond to a survey, or interact with support, we may retain your message and contact information in order to:

• Respond to your request

• Provide support

• Improve our services

Legal basis: Legitimate interests; consent where applicable.

3. How We Use Your Information

We may use personal data to:

• Provide, operate, maintain, and secure Gojiberry AI

• Identify, qualify, enrich, and rank relevant B2B prospects

• Enable customer-selected integrations and workflows

• Communicate with users and customers

• Process subscriptions and payments

• Improve our platform and AI-enabled features

• Conduct analytics and measure performance

• Prevent fraud, abuse, and security incidents

• Comply with legal obligations

• Protect our rights and enforce our agreements

We may use aggregated or deidentified information for research, benchmarking, analytics, and statistics.

4. Data Sharing

We may share personal data with:

• Service providers and subprocessors that help us operate the service

• Customer-selected integrations such as CRM, email, messaging, or productivity tools

• Payment providers such as Stripe

• Analytics, advertising, and marketing providers

• Professional advisers such as lawyers, auditors, insurers, and accountants

• Public authorities where legally required

• Parties involved in a merger, acquisition, financing, restructuring, or similar transaction

• Other parties where you direct or consent to the disclosure

Where required by law, we enter into appropriate data-processing and confidentiality arrangements with service providers.

A list of relevant subprocessors is available upon request.

For information about disclosures that may qualify as a “sale” or “sharing” under California law, please see our California Privacy Notice.

5. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy and to comply with applicable legal, contractual, security, and accounting obligations.

For business contact and lead data, we determine retention periods based on the purpose of the processing, the relevance and accuracy of the data, applicable legal requirements, and any objection or deletion request. We periodically review and refresh this data and delete, anonymize, or suppress records when they are no longer necessary for those purposes.

For other categories of data:

• Account data is generally retained while your subscription or account remains active.

• Data processed solely on behalf of customers is retained in accordance with our contractual commitments and the customer’s instructions.

• Billing, tax, and accounting records may be retained for longer periods where required by law.

• Minimal suppression-list information may be retained as necessary to honor an objection or opt-out and prevent re-contact or re-enrichment.

6. International Transfers

Gojiberry AI operates internationally and may use service providers located outside the EEA or UK.

Where personal data is transferred outside the EEA or UK, we rely on lawful transfer mechanisms as applicable, including:

• an applicable adequacy decision;

• the EU-U.S. Data Privacy Framework where the recipient is certified and the transfer falls within the scope of that certification;

• the European Commission’s Standard Contractual Clauses;

• the applicable UK International Data Transfer Addendum, International Data Transfer Agreement, or other recognized safeguards; or

• another lawful transfer mechanism recognized under applicable data protection law.

7. Your GDPR / UK GDPR Rights

If the GDPR or UK GDPR applies to you, you may have the right to:

• Access your personal data

• Correct inaccurate or incomplete personal data

• Request deletion of your personal data

• Restrict certain processing

• Object to processing based on legitimate interests

• Object at any time to processing for direct marketing

• Obtain a portable copy of certain personal data

• Withdraw consent at any time where processing is based on consent

• Not be subject to certain solely automated decisions producing legal or similarly significant effects

• Lodge a complaint with a competent data protection authority

Where applicable, you may also request information about the source of personal data that we did not obtain directly from you.

To exercise your rights, visit our Privacy Choices page or contact us at [email protected].

We may need to verify your identity before completing certain requests.

If you are a California resident, please see our separate California Privacy Notice for additional rights and disclosures.

8. Security & Breach Notification

We use technical and organizational measures designed to protect personal data, including measures such as:

• Encryption in transit and at rest

• Access controls

• Authentication and authorization safeguards

• Logging and monitoring

• Security review and incident-response processes

• Backups and continuity measures

No system can be guaranteed to be completely secure.

Where required by applicable law, we will notify affected individuals and relevant authorities of qualifying personal data breaches within the applicable legal timeframe.

9. Children’s Privacy

Our services are intended for businesses and professionals and are not directed to children.

We do not knowingly collect personal data directly from children under 13. If we learn that we have collected such information in circumstances where the collection is not permitted, we will take appropriate steps to delete it.

10. Third-Party Websites and Services

Our website and services may contain links to or integrations with third-party websites, platforms, applications, or services.

This Privacy Policy does not govern the independent privacy practices of those third parties. Their handling of personal data is governed by their own privacy notices and terms.

11. Changes to This Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the “Last updated” date above. If we make material changes, we may provide additional notice by email, in-product notification, or a prominent notice on our website, where required by law.

12. Contact

For privacy-related questions or requests, contact:

[email protected]

Gojiberry AI is operated by:

Superfruits SAS
60 Rue François 1er
75008 Paris, France
SIREN: 988 586 111 R.C.S. Paris

Parent company:

Superfruits, Inc.
1111B S Governors Ave #56959
Dover, DE 19904
United States

Privacy rights requests can also be submitted at:

https://gojiberry.ai/optout